Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: MxPsxKR1RTgwnYyjXyuT1WPc61TCr5eM66K96LdTxHU=
Subject key identifier: 40:B2:4E:49:67:E5:42:37:0B:05:3F:A6:1F:FA:A8:EC:BC:07:21:14
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 0196C49541BA6DB9FDE3ACF77A05D650BFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 02C8
Signing time: Mon 12 May 2025 13:00:38 +0000
Manifest this update: Mon 12 May 2025 13:00:38 +0000
Manifest next update: Tue 13 May 2025 13:00:38 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: b+4xnjDHYo18jSBn94KeWBczYjvbi3i8AaZDbQNDYao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:41:ba:6d:b9:fd:e3:ac:f7:7a:05:d6:50:bf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: May 12 13:00:38 2025 GMT
Not After : May 13 13:00:38 2025 GMT
Subject: CN=40b24e4967e542370b053fa61ffaa8ecbc072114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:79:45:0d:4e:6a:82:a5:20:a1:6c:3b:cf:
8c:12:df:eb:76:9e:e6:51:bc:c8:50:c6:6a:ce:85:
f5:d2:9b:d6:a4:a3:a0:19:55:6d:a3:46:1d:a7:4f:
5c:bb:e9:d8:4c:a2:2d:8f:83:c6:8b:16:72:d7:b3:
80:a7:6b:cd:38:24:56:3e:1e:17:ca:7a:54:78:25:
4d:fe:23:0f:f7:cb:50:81:47:b4:c4:a9:89:32:e4:
9a:e9:51:7c:27:54:38:ce:39:e6:be:aa:47:0e:ae:
5d:9c:22:ae:55:ca:10:71:fe:df:8b:a4:55:fa:6f:
fd:24:ae:40:db:db:e6:ae:db:3a:d0:00:08:22:b5:
18:0d:76:ef:5b:f7:89:ec:18:11:67:6e:a5:6e:c3:
81:f4:67:c1:f2:af:65:5b:54:36:35:3d:32:60:5e:
8e:1b:5f:af:18:a0:0d:a8:32:6d:0a:c7:ff:24:df:
54:f0:51:9b:a0:a8:4b:0b:39:0f:0f:bc:44:d3:1e:
f1:14:cf:45:49:94:1a:c9:81:78:de:fa:dd:1b:8d:
30:34:5b:8b:3a:c4:f2:d8:d6:35:a8:f0:31:05:b5:
13:65:74:bf:6e:12:ad:4e:0f:43:82:9f:50:12:83:
6f:70:3c:95:21:5e:fd:1c:ee:9c:7e:d8:04:33:63:
76:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B2:4E:49:67:E5:42:37:0B:05:3F:A6:1F:FA:A8:EC:BC:07:21:14
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b4:d5:9a:cd:07:5b:87:86:80:f3:a1:1b:0e:85:20:0a:02:
11:bf:b4:0b:ff:0d:a9:35:2b:0c:51:3a:ae:b3:dd:72:7a:e6:
f5:c8:8a:15:09:ac:2a:3b:05:d5:77:fc:11:30:35:83:49:2c:
79:58:0e:15:bc:0b:a8:88:f9:48:13:1d:ec:f3:7a:f9:92:85:
eb:81:f6:77:06:e5:00:67:ec:18:12:2a:e4:ca:12:35:49:44:
e9:a2:ee:1c:4c:eb:b6:1e:fe:ad:f7:3b:cc:79:4c:40:33:28:
8e:70:ca:41:80:67:95:67:8e:2e:88:50:74:e9:b5:12:b2:32:
29:70:9e:cd:8c:aa:f9:af:29:b0:2f:6c:ec:91:e2:3a:85:d3:
d7:60:6e:ac:d5:91:6f:9d:a0:07:14:b2:ff:2b:25:cb:58:0d:
1f:bc:3f:1c:fb:ab:66:cb:53:1b:f6:42:bb:8d:02:b8:d8:3a:
97:24:fe:60:46:b3:06:45:27:92:42:ec:53:5c:f8:61:9a:97:
32:a4:bc:f8:44:9c:68:fa:b6:90:9d:5b:e4:7b:0d:85:b1:72:
42:4d:7b:b0:95:9c:e4:62:af:66:01:69:30:21:94:51:81:1b:
88:12:78:5d:5e:af:cb:a3:06:ea:46:c1:a1:f6:07:0b:dc:75:
bc:b8:1e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:39:30 2025 by rpki-client